Lucene search
+L

10 matches found

CNNVD
CNNVD
added 2026/04/28 12:0 a.m.10 views

BinSoft mpGabinet 安全漏洞

BinSoft mpGabinet is a medical clinic management system developed by the Polish company BinSoft. Versions of BinSoft mpGabinet prior to December 23, 2021, contained security vulnerabilities. These vulnerabilities were due to issues with remote command execution, which could allow authorized users...

4.7CVSS5.9AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/01 6:36 p.m.3 views

EUVD-2025-209168

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

4.7CVSS5.8AI score0.00142EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/01 12:0 a.m.4 views

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

5.8AI score0.00142EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/01 12:0 a.m.23 views

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

0.00142EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/25 3:15 p.m.7 views

CVE-2022-24331

In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible...

9.8CVSS7.3AI score0.01146EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/01/14 12:0 a.m.14 views

PT-2022-12366 · Imperva · Imperva Web Application Firewall

Name of the Vulnerable Software and Affected Versions: Imperva Web Application Firewall WAF versions prior to 2021-12-23 Description: The issue allows remote unauthenticated attackers to use Content-Encoding: gzip to evade security controls and send malicious HTTP POST requests to web servers...

9.8CVSS9.4AI score0.03991EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2021/09/14 11:0 p.m.5 views

CVE-2021-39840

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability when processing AcroForms that could result in arbitrary code execution in the context of the current user. User interaction is required ...

7.8CVSS7.7AI score0.50626EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/07 3:15 p.m.4 views

AZL-6763 CVE-2021-39258 affecting package ntfs-3g for versions less than 2021.8.22-1

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

7.8CVSS6.7AI score0.00421EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.7 views

Facebook Thrift 安全漏洞

Facebook Thrift is a fork of Apache Thrift, a serialization and RPC framework for service communication from Facebook, USA. A security vulnerability exists in versions prior to Facebook Thrift v2021.02.22.00, which stems from an invalid free in Thrift's table-based serialization that could cause ...

9.8CVSS8.2AI score0.01746EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/08 9:15 p.m.8 views

CVE-2020-14106

The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI 2021.01.26...

5.5CVSS5.8AI score0.00663EPSS
SaveExploits0References1
Rows per page
Query Builder